This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/BrAnGoTaeuWbLN83YSWRTUeEiBY.roa File: BrAnGoTaeuWbLN83YSWRTUeEiBY.roa (raw, json) Hash identifier: xjkY08/fnC0YBLu0Sd65yZ46j6OEmjn42MS0sURp14Q= Subject key identifier: 06:B0:27:1A:84:DA:7A:E5:9B:2C:DF:37:61:25:91:4D:47:84:88:16 Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Certificate serial: 019B260E9946F42D16B83130EB8C9B240FA8 Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/BrAnGoTaeuWbLN83YSWRTUeEiBY.roa Signing time: Tue 16 Dec 2025 07:27:29 +0000 ROA not before: Tue 16 Dec 2025 07:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49223 IP address blocks: 45.14.24.0/22 maxlen: 22 91.243.180.0/22 maxlen: 22 109.108.224.0/19 maxlen: 19 109.108.224.0/20 maxlen: 20 109.108.240.0/20 maxlen: 20 141.138.96.0/19 maxlen: 19 178.74.192.0/18 maxlen: 18 178.74.192.0/19 maxlen: 19 178.74.240.0/20 maxlen: 20 185.16.124.0/22 maxlen: 22 185.43.236.0/22 maxlen: 22 185.77.100.0/22 maxlen: 22 185.86.0.0/22 maxlen: 22 185.119.212.0/22 maxlen: 22 185.181.36.0/22 maxlen: 22 193.106.20.0/22 maxlen: 22 193.148.88.0/22 maxlen: 22 213.226.92.0/22 maxlen: 22 217.30.192.0/20 maxlen: 20 2a04:100::/29 maxlen: 29 2a04:100::/36 maxlen: 36 2a04:100:1000::/36 maxlen: 36 2a04:100:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:0e:99:46:f4:2d:16:b8:31:30:eb:8c:9b:24:0f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Validity Not Before: Dec 16 07:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=06b0271a84da7ae59b2cdf376125914d47848816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:29:64:37:b0:ab:ed:52:40:57:41:6a:52: a6:4c:63:e4:7c:84:06:46:44:ca:2b:75:fb:9d:cc: d1:16:88:47:49:ab:38:a9:b5:79:31:4a:59:10:d3: 37:63:73:7c:2b:2f:e2:f8:17:00:f0:ea:26:cf:fa: 5f:13:03:ea:7c:44:35:02:2e:2c:37:f3:81:f2:bc: 67:db:d1:ad:f1:4c:ce:1b:7e:02:69:30:ae:ec:52: 5c:73:60:5b:36:71:ca:e2:99:43:a4:36:a1:6b:f8: 44:4f:de:e9:55:0b:02:23:41:af:a3:5d:cc:0d:a3: d7:79:cd:12:02:e2:37:db:11:a2:33:86:7d:b4:34: 8d:71:ff:0e:eb:64:31:da:44:5f:0f:fa:f9:37:d7: a5:39:2c:2e:69:b3:8b:33:1e:f0:ff:32:79:f9:8d: 24:2d:72:6d:03:b6:ce:ac:ac:e8:fb:9a:fa:ae:a5: 94:ed:a0:e3:af:78:46:96:70:62:a5:c4:91:d5:ec: 3d:0c:a9:61:95:be:c5:0c:7e:69:66:5e:34:43:ba: e3:ce:1f:22:cd:39:51:a2:61:e8:a0:b8:00:69:b9: 13:bc:79:42:81:b4:60:c0:68:6d:15:2c:1b:db:b1: d6:31:f6:2c:34:fd:75:d9:36:54:19:ab:a7:2b:e7: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B0:27:1A:84:DA:7A:E5:9B:2C:DF:37:61:25:91:4D:47:84:88:16 X509v3 Authority Key Identifier: keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/BrAnGoTaeuWbLN83YSWRTUeEiBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.24.0/22 91.243.180.0/22 109.108.224.0/19 141.138.96.0/19 178.74.192.0/18 185.16.124.0/22 185.43.236.0/22 185.77.100.0/22 185.86.0.0/22 185.119.212.0/22 185.181.36.0/22 193.106.20.0/22 193.148.88.0/22 213.226.92.0/22 217.30.192.0/20 IPv6: 2a04:100::/29 Signature Algorithm: sha256WithRSAEncryption 60:7f:eb:fa:d2:73:44:6c:04:c6:9b:b6:e8:99:e9:71:b1:43: 8c:64:94:8f:a1:dd:26:79:c7:6a:cd:37:79:5e:d8:3d:a4:97: d2:29:fa:ea:eb:4b:05:af:57:d7:ae:a1:07:70:20:a6:c3:ff: e6:17:d0:69:68:b5:18:b5:1f:46:e4:67:d9:f8:c6:f8:e0:ae: dd:41:b3:82:ae:d4:d6:a5:ab:0b:e6:be:1f:d7:75:a1:b0:0e: 9d:d9:f6:94:bc:e9:77:78:7d:2a:16:a8:ec:0c:32:0a:24:82: c1:b7:5e:de:c7:32:44:ad:a2:2d:9c:e3:b6:81:f9:9b:ca:1d: 61:5a:cf:8c:30:f7:89:43:fb:e6:e6:61:a7:7d:6e:94:2a:04: f5:36:18:04:89:e4:14:78:3d:95:66:44:97:84:2f:8e:2c:a5: 94:b1:ae:53:52:b0:8a:82:a4:d2:6b:74:c8:cf:02:49:48:b0: f9:4f:92:9c:f4:2b:e1:20:1d:ac:f0:db:05:b6:03:51:81:e5: 37:19:3f:77:ed:bb:43:56:44:df:9b:fa:45:a6:ac:e3:e7:31: 85:75:49:41:6f:af:df:0f:5b:70:e0:49:63:58:0f:60:17:a0: 5e:f5:20:7a:ed:9d:c3:b7:0a:99:52:b2:e3:75:5f:a8:dd:28: 12:e3:be:23 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZsmDplG9C0WuDEw64ybJA+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm NDE0NzMwHhcNMjUxMjE2MDcyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmIwMjcxYTg0ZGE3YWU1OWIyY2RmMzc2MTI1OTE0ZDQ3ODQ4ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlIpZDewq+1SQFdBalKmTGPkfIQG RkTKK3X7nczRFohHSas4qbV5MUpZENM3Y3N8Ky/i+BcA8Oomz/pfEwPqfEQ1Ai4s N/OB8rxn29Gt8UzOG34CaTCu7FJcc2BbNnHK4plDpDaha/hET97pVQsCI0Gvo13M DaPXec0SAuI32xGiM4Z9tDSNcf8O62Qx2kRfD/r5N9elOSwuabOLMx7w/zJ5+Y0k LXJtA7bOrKzo+5r6rqWU7aDjr3hGlnBipcSR1ew9DKlhlb7FDH5pZl40Q7rjzh8i zTlRomHooLgAabkTvHlCgbRgwGhtFSwb27HWMfYsNP112TZUGaunK+d2OQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFAawJxqE2nrlmyzfN2ElkU1HhIgWMB8GA1UdIwQY MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt NjRiMGU2MTRkMDA0LzEvQnJBbkdvVGFldVdiTE44M1lTV1JUVWVFaUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0 LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEAi0OGAME AlvztAMEBW1s4AMEBY2KYAMEBrJKwAMEArkQfAMEArkr7AMEArlNZAMEArlWAAME Arl31AMEArm1JAMEAsFqFAMEAsGUWAMEAtXiXAMEBNkewDANBAIAAjAHAwUDKgQB ADANBgkqhkiG9w0BAQsFAAOCAQEAYH/r+tJzRGwExpu26JnpcbFDjGSUj6HdJnnH as03eV7YPaSX0in66utLBa9X166hB3AgpsP/5hfQaWi1GLUfRuRn2fjG+OCu3UGz gq7U1qWrC+a+H9d1obAOndn2lLzpd3h9Khao7AwyCiSCwbde3scyRK2iLZzjtoH5 m8odYVrPjDD3iUP75uZhp31ulCoE9TYYBInkFHg9lWZEl4QvjiyllLGuU1KwioKk 0mt0yM8CSUiw+U+SnPQr4SAdrPDbBbYDUYHlNxk/d+27Q1ZE35v6Raas4+cxhXVJ QW+v3w9bcOBJY1gPYBegXvUgeu2dw7cKmVKy43VfqN0oEuO+Iw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:29 2025 by rpki-client